X-Git-Url: https://git.octo.it/?a=blobdiff_plain;f=ChangeLog;h=85e9b523d2fda568d01841c56e778fe5f84e4dd0;hb=f04f0bbd2c606f958434872f61588bf9004efcd1;hp=121e8bfb504960efe8c02d13414408b1c7050b57;hpb=2a858332efd560a8cd45b5cd3787946e7505a705;p=liboping.git

diff --git a/ChangeLog b/ChangeLog
index 121e8bf..85e9b52 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -1,3 +1,29 @@
+2009-12-20, Version 1.3.4:
+	* src/liboping.c: When one file descriptor was in an error state, the
+	  select(2) loop would run indefinitely. Error handling has been
+	  improved so the loop ends gracefully now in this case.
+	* src/liboping.c: Drop privileges before reading files if supported by
+	  the system. This way files are opened using the user's original
+	  privileges when using the “-f” option.
+	* Net::Oping: An off-by-one error has been fixed in the Perl bindings.
+	  Thanks to Fredrik Soderblom for his patch.
+
+2009-09-29, Version 1.3.3:
+	* oping: Disable the “-f” option if the real and effective user IDs
+	  don't match. If that is the case the program is probably running
+	  SetUID and should not read foreign files. Unfortunately, dropping
+	  privileges before reading the file is not possible, because they are
+	  required for opening raw sockets.
+
+	  Reading from STDIN using “-f -” is still possible.
+
+	  Thanks to Steve Kemp for reporting this issue as Debian bug #548684.
+
+2009-07-27, Version 1.3.2:
+	* src/oping.h: Remove `HAVE_*_H' macros for system headers. Those
+	  macros should not be used in system wide installed header files.
+	  Thanks to Sebastian for fixing this.
+
 2009-07-20, Version 1.3.1
 	* src/liboping.c: Fix too eager argument validation that prevented the
 	  library to work as documented. Thanks to Sebastian for catching this